Debian: Security Advisory (DSA-3385-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4895

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB...

CVE-2015-4895

CVE-2015-4895 is an unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier that could allow remote authenticated users to affect availability through unknown vectors related to InnoDB. Public documentation in the connected advisories confirms the CVE is listed among multiple MySQL/Ma...

CVE-2014-4895

CVE-2014-4895 affects the Android app Herpin Time Radio (com.herpin.time.radio) version 2.0. The vulnerability is that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle attacker to spoof servers and obtain sensitive information via a crafted certificate. Th...

Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1083-1)

Dan Rosenberg discovered that the RDS network protocol did not correctly check certain parameters. A local attacker could exploit this gain root privileges. CVE-2010-3904 Nelson Elhage discovered several problems with the Acorn Econet protocol driver. A local user could cause a denial of service...

CVE-2012-4895

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

CVE-2012-4895

Heap-based buffer overflow in SumatraPDF before 2.1 allows remote attackers to execute arbitrary code via a crafted PDF document, a different vulnerability than CVE-2012-4896...

CVE-2012-4895

Summary: CVE-2012-4895 and CVE-2012-4896 describe heap-based buffer overflows in SumatraPDF before 2.1 that allow remote code execution via a crafted PDF document. The two CVEs are stated as different vulnerabilities. The provided details confirm the affected product (SumatraPDF), the vulnerable ...

Vulnerabilities in SumatraPDF Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of multiple vulnerabilities affecting SumatraPDF Reader software version 2.0.1 and earlier. Microsoft discovered and disclosed the vulnerability under coordinated vulnerability disclosure to the affected vendor...

CVE-2005-4895

Multiple integer overflows in TCMalloc tcmalloc.cc in gperftools before 0.4 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows via a large size value, which causes less memory to be allocated than expected...

CVE-2005-4895

CVE-2005-4895 affects gperftools' TCMalloc (tcmalloc.cc) prior to 0.4. It describes multiple integer overflows that cause under-allocation when large size values are used, enabling context-dependent attackers to perform memory-related issues such as buffer overflows. The connected documents confi...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, builds circuits in a way that differs from client circuits, making it easier for remote attackers to enumerate bridges by observing circuit construction. Affects Tor code path used for bridges; vulnerability achieved through the bridge-circuit set...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2010-4895

CVE-2010-4895 affects chillyCMS 1.1.3, with the vulnerability in core/showsite.php where input from the name parameter (username field) enables cross-site scripting (XSS). The issue allows remote attackers to inject arbitrary web script or HTML. Public references corroborate XSS wording; no expli...

Ubuntu: Security Advisory (USN-1083-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2094-1 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 2094-1. OpenVAS Vulnerability Test $Id: deb20941.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2094-1 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...

CVE-2009-4895

CVE-2009-4895 describes a race condition in the Linux kernel's tty_fasync path (drivers/char/tty_io.c) prior to 2.6.32.6, enabling local users to cause a denial of service via a NULL pointer dereference and system crash. The issue is tied to put_tty_queue and __f_setown, with a note that it was a...